Skip to content
OpenAdvisories

Package · Maven

org.springframework.ws:spring-xml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-40998

    Jaxp13 XPath XXE via StreamSource and SAXSource

    Jaxp13XPathTemplate evaluated XPath expressions for StreamSource and SAXSource inputs using a code path that parsed attacker-controlled XML with the JDK's default DocumentBuilderFactory behavior instead of Spring's hardened parser configuration. Applications …

    Spring Spring Web Services org.springframework.ws:spring-xml Maven